$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/23a85307-6eb7-34bf-95dd-5561c9a2cb10.roa File: 23a85307-6eb7-34bf-95dd-5561c9a2cb10.roa (raw, json) Hash identifier: I1XlJrXzq0KlicoycZ+hdCRltuKuGjKPVwqN2+0Uz8A= Subject key identifier: D1:7B:1A:C8:DF:99:93:43:C5:F5:7F:A0:D3:86:79:D7:5F:7E:B8:5E Certificate issuer: /CN=d714f85c-7c5b-49fe-8910-f5b808ebb556 Certificate serial: 010D0C9F4328584F4974B793108D0E3F5AC90740 Authority key identifier: 27:C3:38:AD:C5:DF:C1:B6:5D:08:22:EB:E2:FD:35:53:3E:D5:C6:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/23a85307-6eb7-34bf-95dd-5561c9a2cb10.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 18646 IP address blocks: 192.234.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/d714f85c-7c5b-49fe-8910-f5b808ebb556.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/d714f85c-7c5b-49fe-8910-f5b808ebb556.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:b7:93:10:8d:0e:3f:5a:c9:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d714f85c-7c5b-49fe-8910-f5b808ebb556 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0d6474b1-1cbf-4d50-808c-67af994c2a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e4:6d:86:6d:88:20:32:99:1d:ad:8a:47:a1: 66:1e:b4:cd:14:38:93:d6:d3:6b:2d:7e:54:33:8a: 51:2e:ba:99:70:7e:ee:fd:d4:ef:7c:83:95:6f:7a: 35:8a:a5:99:1e:36:d9:14:89:82:b5:0f:5c:8f:ff: dd:ce:de:54:07:2b:60:ed:f4:92:62:a1:36:4a:40: f6:85:8e:86:38:1f:c7:8e:d6:cc:aa:c1:90:66:64: 7b:20:00:d7:fd:b7:20:e8:0b:85:7c:a5:29:98:42: 54:66:e6:52:ac:d6:e1:75:4c:dd:71:4a:2e:bc:f5: 9d:aa:94:ee:7d:d4:12:7e:b8:eb:68:87:c2:39:3e: 21:b7:d8:28:23:7f:ad:e5:d3:97:62:db:a5:94:09: 40:76:b6:94:c0:7a:d3:35:8c:ad:19:df:86:c6:58: 9b:1d:69:08:a8:ee:eb:ab:59:32:9c:b1:be:e7:69: d1:01:5b:db:c4:a8:cd:b8:e2:db:cd:d6:c9:65:ff: 65:0d:ec:c6:94:3b:2c:50:dd:66:46:d3:b6:e9:4b: 8d:48:15:c3:cf:8b:37:f1:c0:7c:05:07:93:5b:41: 4b:0e:e3:1c:3e:07:53:b6:59:9f:d1:51:1f:b9:a1: 2a:b9:06:eb:82:63:1e:9b:cd:80:f4:b7:2c:3d:31: eb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7B:1A:C8:DF:99:93:43:C5:F5:7F:A0:D3:86:79:D7:5F:7E:B8:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/23a85307-6eb7-34bf-95dd-5561c9a2cb10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/d714f85c-7c5b-49fe-8910-f5b808ebb556.crl X509v3 Authority Key Identifier: keyid:27:C3:38:AD:C5:DF:C1:B6:5D:08:22:EB:E2:FD:35:53:3E:D5:C6:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556.cer sbgp-ipAddrBlock: critical IPv4: 192.234.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:07:61:7d:a8:ac:59:f8:65:57:3a:23:32:bc:e0:4b:d5:fe: 91:d2:92:0b:af:ad:55:10:d7:8d:a0:ab:f0:55:83:cd:67:7a: 97:fb:20:16:fe:58:25:cc:ac:33:42:24:18:39:8c:12:e2:0c: 6a:75:1a:bc:c2:14:a5:9a:76:af:97:e2:f0:23:58:ec:fa:b3: ab:7f:1d:6e:e0:cf:b9:0a:b4:51:2e:33:dc:4d:9b:0f:1a:dc: 07:00:14:d2:12:fc:7b:4f:b1:2d:3c:a6:de:e1:eb:6d:52:54: 84:e2:42:11:3d:2c:4b:e5:2e:85:47:e4:0e:a2:f1:70:0b:6a: 6c:5e:b4:72:e7:8e:01:5c:a1:2f:0c:70:5d:e4:37:05:f3:23: 38:60:0d:77:79:ab:a1:3e:95:d6:0c:86:7d:24:cb:6c:40:52: 1e:96:62:1c:7d:5e:85:00:d7:70:9c:ce:62:e9:70:d6:0b:1f: eb:11:3c:02:67:f6:04:75:46:85:a7:63:ba:d9:28:c8:23:f6: c8:c0:ea:45:51:f9:99:cd:0e:05:da:c3:38:98:7a:ae:53:10: c0:fc:19:7f:13:a5:13:2e:90:35:cb:e8:bf:d1:42:25:c3:8f: a9:e6:b6:c1:0f:21:cf:92:c7:5a:40:a5:05:4f:51:b9:78:f8: 84:79:23:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdLeTEI0OP1rJB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcxNGY4NWMtN2M1Yi00OWZlLTg5MTAtZjViODA4ZWJi NTU2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGQ2NDc0YjEtMWNiZi00ZDUwLTgwOGMtNjdhZjk5NGMyYTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjORthm2IIDKZHa2KR6FmHrTNFDiT1tNrLX5U M4pRLrqZcH7u/dTvfIOVb3o1iqWZHjbZFImCtQ9cj//dzt5UBytg7fSSYqE2SkD2 hY6GOB/HjtbMqsGQZmR7IADX/bcg6AuFfKUpmEJUZuZSrNbhdUzdcUouvPWdqpTu fdQSfrjraIfCOT4ht9goI3+t5dOXYtullAlAdraUwHrTNYytGd+GxlibHWkIqO7r q1kynLG+52nRAVvbxKjNuOLbzdbJZf9lDezGlDssUN1mRtO26UuNSBXDz4s38cB8 BQeTW0FLDuMcPgdTtlmf0VEfuaEquQbrgmMem82A9LcsPTHrowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNF7GsjfmZNDxfV/oNOGeddffrheMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNzE0 Zjg1Yy03YzViLTQ5ZmUtODkxMC1mNWI4MDhlYmI1NTYvMjNhODUzMDctNmViNy0z NGJmLTk1ZGQtNTU2MWM5YTJjYjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDcxNGY4NWMtN2M1Yi00OWZlLTg5 MTAtZjViODA4ZWJiNTU2L2Q3MTRmODVjLTdjNWItNDlmZS04OTEwLWY1YjgwOGVi YjU1Ni5jcmwwHwYDVR0jBBgwFoAUJ8M4rcXfwbZdCCLr4v01Uz7VxgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNzE0Zjg1Yy03YzViLTQ5ZmUtODkxMC1mNWI4 MDhlYmI1NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQHYX2orFn4ZVc6IzK84EvV/pHSkguvrVUQ142gq/BVg81nepf7IBb+ WCXMrDNCJBg5jBLiDGp1GrzCFKWadq+X4vAjWOz6s6t/HW7gz7kKtFEuM9xNmw8a 3AcAFNIS/HtPsS08pt7h621SVITiQhE9LEvlLoVH5A6i8XALamxetHLnjgFcoS8M cF3kNwXzIzhgDXd5q6E+ldYMhn0ky2xAUh6WYhx9XoUA13CczmLpcNYLH+sRPAJn 9gR1RoWnY7rZKMgj9sjA6kVR+ZnNDgXawziYeq5TEMD8GX8TpRMukDXL6L/RQiXD j6nmtsEPIc+Sx1pApQVPUbl4+IR5I4Q= -----END CERTIFICATE-----Generated at Sat Sep 26 09:08:29 2026 by rpki-client